Skip to content
OpenAdvisories

Package · Maven

org.apache.cxf:cxf-rt-rs-security-sso-saml

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    CVE-2015-5253

    Improper Access Control in Apache CXF

    The SAML Web SSO module in Apache CXF before 2.7.18, 3.0.x before 3.0.7, and 3.1.x before 3.1.3 allows remote authenticated users to bypass authentication via a crafted SAML response with a valid signed assertion, related to a "wrapping attack."

    org.apache.cxf:cxf-rt-rs-security-sso-saml Maven